Your venue’s own
staff portal.
Open your venue’s private link on a device you’ve paired, and each staff member signs in with their own PIN — no shared password, no staff email accounts. A clear workspace for every member of your team: live bookings, the floor plan and the day’s tools, showing only the parts their role allows.
On Plus (£39/month) and up. The free plan has one staff account — you.
Pair a device.
Hand out PINs.
Four things, once. After that the portal looks after itself and you get your evenings back from password resets.
Pair your devices
An owner signs in once on the iPad by the pass and pairs it. Only paired devices ever show the PIN screen — anything else is told the device needs setting up first.
Add your team
Add each person by name and give them a role. They get their own PIN — no email account to create, no password to share round the section.
They sign in with a PIN
Open the venue’s link, type the PIN, and they’re in. Everything they do from then on is recorded under their own name.
Sessions look after themselves
Paired devices are listed by name and revocable in a tap, and any signed-in session can be ended remotely — from anywhere, mid-service.
Everyone sees
exactly what they should.
Four built-in roles cover the usual split. Add up to five of your own, then tweak any single person on top — without inventing a whole new role for one exception.
Four built-in roles
Owner, Admin, Manager and Host, out of the box. Admins run everything except billing, managers run the operation, and hosts get bookings and front-of-house with no settings at all.
Five roles of your own
A Bar role. A Duty Manager. Add up to five custom roles, then grant or hold back a single permission for an individual on top — the exception doesn’t need its own job title.
Hidden, not locked
The portal menu only shows what that person can actually open. No greyed-out buttons, no “ask a manager” dead ends — just a shorter menu that does what it says.
Built for the iPad
everyone touches.
One device, a dozen hands, and a staff list that changes with the seasons. The portal is designed for exactly that, not apologising for it.
Devices you can name and revoke
Paired devices are listed by name — “Front pass iPad”, “Office laptop” — and revoked in a tap. The portal link itself can be rotated, with a grace window so nobody is locked out halfway through a service.
Every action under a name
Every action is logged under the staff member’s own name, and every signed-in session is visible and can be ended remotely. Not for catching people out — for knowing what happened at 20:40.
Their portal, their way
Each staff member picks their own light or dark look and can change their own PIN, without asking you and without touching anyone else’s.
A manager’s PIN,
when money moves.
A refund at the pass shouldn’t mean finding the owner, or handing round a password that then lives in someone’s notes app for a year.
A staff member with the right permission types their own PIN.
One PIN, one action
The approval covers that single action and expires after two minutes. It isn’t a session, it isn’t a login, and it can’t be left open on the pass.
Checked against their role, every time
A PIN can never approve more than its owner could do themselves — the permission is re-checked on the server for every single approval.
On the record
Who approved what, and when, lands in the activity log under their own name. The next morning’s question has an answer.
Never for personal data
Actions touching guests’ personal data are deliberately excluded from PIN approval. Those always require a real password sign-in — no exceptions, no setting to turn it off.
How the portal is designed.
Four design choices worth knowing before your team's first shift on it.
Staff sign in with a PIN, not a password
Staff don’t get email-and-password logins — the PIN is the account. Owners and admins still sign in with their own credentials, and there’s a link for that on the same screen.
A device must be paired first
An owner pairs each device once. Until that happens, the device never shows the PIN screen at all — it says it needs setting up and stops there.
Staff seats follow your plan
On the free plan it’s just you. The portal, roles and PINs arrive on Plus, and the number of staff accounts grows with the plan — see the figures below.
Ten wrong PINs locks that device for an hour
The lockout is per device, so a mistyped PIN on one device never locks out the whole team. An owner can clear it early.
Staff accounts,
plan by plan.
The portal itself, roles, custom permissions and the activity log all arrive together on Plus. Five custom roles are available on every plan that carries the portal — it’s the number of people, not the number of roles, that grows.
“Unlimited” allowances are subject to our fair usage policy. Your allowance is whichever is larger: your plan’s staff allowance, or the owner plus one seat per active product.
Before you ask.
Do my staff need email accounts?
No. You add each person by name and they sign in with their own PIN. They can change that PIN themselves from their portal profile.
What can a host actually see?
Bookings and front-of-house, and nothing else — no settings, no billing, no reports. The menu simply doesn’t show what their role can’t open, so there are no locked doors to rattle.
Someone’s left. What do I do?
Remove them, and end any session they still have open. If a device has gone with them, revoke that device — and if you want the whole link changed, rotate it, with a grace window so the rest of the team stays signed in.
Can a manager approve a refund without me?
Yes, if their role carries that permission. They type their own PIN, it approves that one action, it expires after two minutes, and it’s recorded under their name. Anything involving guests’ personal data always needs a real password instead.
Which plan do I need?
Plus, at £39 a month, is where the staff portal, roles and PINs start. The free plan is a single account — you — which is plenty while it’s just you, and a plan change away when it isn’t.
Give your team
their own keys.
Start free — and when the team grows, staff PINs, roles and paired devices are one plan change away.
No credit card required · Free plan available · 14-day money-back guarantee on paid plans